$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft File: v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json) Hash identifier: h/Xla4u8ohy7LvbGd0EVLd8k3tFpXj7uv2zXMLSpaNg= Subject key identifier: BE:B7:6B:D3:6F:0B:AF:8F:9E:55:AC:8C:B8:00:CD:64:82:42:17:14 Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft Manifest number: 0773 Signing time: Tue 04 Nov 2025 21:50:34 +0000 Manifest this update: Tue 04 Nov 2025 21:50:33 +0000 Manifest next update: Tue 11 Nov 2025 21:50:33 +0000 Files and hashes: 1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: SyTW8uOZiPTPlvUoM5j6hXhLwX47z6MKVs5hgwW7HD0=) 2: 05AF21A4B71311F0B98A8D22C4F9AE02.roa (hash: /IPfDG3dNkKnM9ckspPgqTdtR8Igue5PV2ka5sPIhHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Nov 4 21:50:33 2025 GMT Not After : Nov 11 21:50:33 2025 GMT Subject: CN=690a7529-1ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:40:84:f8:7f:5f:b9:8e:20:75:40:22:01: 40:98:58:a4:6a:d2:b0:bc:06:f3:12:9e:23:6a:ea: db:0c:04:67:0c:d4:d1:73:74:84:52:1a:83:01:cc: 26:44:a3:0e:74:54:bf:8e:a5:96:87:db:60:6a:ca: ed:e5:74:f1:9c:46:5e:74:54:14:23:97:c1:12:1c: e2:52:07:57:f7:16:77:5f:0e:97:be:40:4e:7d:cf: a5:ea:7f:ec:ce:b6:be:98:7e:1c:ad:b9:6e:1d:c8: bf:26:6b:7f:04:57:07:55:e8:20:00:3e:a9:0d:f3: e9:3e:48:a5:32:8d:84:24:07:23:b9:cc:13:5a:b3: 5d:ce:9a:31:3b:46:e3:09:87:0d:33:c2:6a:c9:f0: 14:32:11:34:0f:dc:83:e7:81:2d:15:7f:c6:fb:8e: 8a:6b:ab:05:ae:57:4e:af:bd:d9:ce:ee:9e:19:49: 5c:4c:34:c5:8e:21:ec:65:45:2f:4a:7f:66:9d:43: 7e:c5:14:fc:03:82:70:d9:9a:69:e8:83:ce:32:79: 15:a2:ea:d6:17:29:46:2e:de:2e:cb:fb:6b:21:7e: 7b:15:ea:e1:e5:78:72:72:0e:0a:f4:41:24:cc:09: 91:42:c9:76:12:2b:99:ad:38:8c:4d:92:b9:44:62: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:6B:D3:6F:0B:AF:8F:9E:55:AC:8C:B8:00:CD:64:82:42:17:14 X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:9f:08:2f:dd:ab:7b:26:a1:a8:bb:ef:1c:9d:aa:e5:04: 7c:ae:0e:e1:b7:e4:52:4a:45:42:c0:31:c7:68:77:46:d5:cd: 16:21:dc:40:ee:9d:03:08:8c:44:5e:99:e3:71:c8:9e:ed:49: 14:84:c3:9b:03:05:3e:bb:f8:fd:b4:97:6b:67:fa:46:3f:0a: 25:89:d6:0e:ff:da:6d:e9:e5:87:55:68:fe:f9:64:12:27:09: e3:ef:f4:5c:6d:26:2c:d9:1c:8d:af:7d:95:05:4b:1a:10:9e: c1:34:5c:7f:c1:7b:42:57:64:99:09:b5:d0:5c:a5:da:02:29: 59:81:c6:1c:cd:19:bc:ec:ff:db:ec:79:4d:8f:0a:59:2a:ee: cb:1c:99:3b:3c:1c:d6:1b:f2:72:f7:5d:c6:c8:40:b1:aa:fd: 63:08:26:9b:4f:37:eb:e3:cc:bc:61:3f:26:f5:aa:11:ff:33: 76:8f:35:67:d7:bd:0e:43:b2:7b:02:1e:c6:65:93:de:5c:07: 18:9b:a3:1b:2d:17:25:fc:fe:de:ee:31:95:ab:1e:4e:18:9b: 8c:19:75:a6:cf:3e:d3:4b:6a:c2:9a:83:41:2a:fd:32:64:10: 2d:5a:3a:f9:ad:8b:57:eb:76:db:ef:bb:0d:f8:8b:f6:fb:3c: f2:f0:98:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjUxMTA0MjE1MDMzWhcNMjUxMTExMjE1MDMzWjAYMRYwFAYD VQQDEw02OTBhNzUyOS0xZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QNAhPh/X7mOIHVAIgFAmFikatKwvAbzEp4jaurbDARnDNTRc3SEUhqDAcwm RKMOdFS/jqWWh9tgasrt5XTxnEZedFQUI5fBEhziUgdX9xZ3Xw6XvkBOfc+l6n/s zra+mH4crbluHci/Jmt/BFcHVeggAD6pDfPpPkilMo2EJAcjucwTWrNdzpoxO0bj CYcNM8JqyfAUMhE0D9yD54EtFX/G+46Ka6sFrldOr73Zzu6eGUlcTDTFjiHsZUUv Sn9mnUN+xRT8A4Jw2Zpp6IPOMnkVourWFylGLt4uy/trIX57Ferh5Xhycg4K9EEk zAmRQsl2EiuZrTiMTZK5RGJHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL63a9Nv C6+PnlWsjLgAzWSCQhcUMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDk4RC80NjE0NTdCNDUwMEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5 VDNzbkJWNHJOSFJmNWhBZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuep8IL92reyahqLvvHJ2q5QR8rg7ht+RSSkVCwDHHaHdG1c0WIdxA 7p0DCIxEXpnjccie7UkUhMObAwU+u/j9tJdrZ/pGPwolidYO/9pt6eWHVWj++WQS Jwnj7/RcbSYs2RyNr32VBUsaEJ7BNFx/wXtCV2SZCbXQXKXaAilZgcYczRm87P/b 7HlNjwpZKu7LHJk7PBzWG/Jy913GyECxqv1jCCabTzfr48y8YT8m9aoR/zN2jzVn 170OQ7J7Ah7GZZPeXAcYm6MbLRcl/P7e7jGVqx5OGJuMGXWmzz7TS2rCmoNBKv0y ZBAtWjr5rYtX63bb77sN+Iv2+zzy8JjT -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:26 2025 by rpki-client